CVE-2017-10117: Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server).

Security readout for executives and security teams

An exposed Oracle Java Advanced Management Console 2.6 server could let an unauthenticated network attacker read some management console data. The sources describe confidentiality impact only, not data modification, service outage, or broader Java endpoint compromise. Risk depends on whether AMC is deployed and reachable over HTTP. Most exposure is expected in organizations that deployed Java Advanced Management Console 2.6 and allowed HTTP access from untrusted networks. General Java SE client or server installations are not shown as affected by the supplied sources unless they include this AMC component. Prioritize if AMC 2.6 is deployed or internet-accessible. The likely business impact is unauthorized read access to management-console data, not full system takeover according to the supplied sources. If AMC is absent, priority is low after validation. Mitigation focus: Review Oracle July 2017 CPU guidance for the supported remediation path.; Check NetApp and Gentoo advisories if those vendor contexts apply.; Remove public or untrusted network access to AMC HTTP interfaces..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.